Personal data processing principles

Personal data processing principles

of BEVES Lanškroun s.r.o., ID No.: 28346653, with registered office at Nádražní 1169, Žichlínské Předměstí, 563 01 Lanškroun, a company registered in the Commercial Register at the Regional Court in Hradec Králové, file No. C 27603.

BEVES Lanškroun s.r.o. (hereinafter referred to as the Administrator) is a personal data administrator pursuant to the General Data Protection Regulation (Regulation (EU) 2016/679), i.e. it collects, stores, uses and otherwise processes the personal data of its employees, customers, business partners and other persons in the course of its business activities, which consist mainly in the production and sale of concrete fencing elements.

This Personal Data Processing Policy applies to (i) the personal data processing carried out by the Administrator also during the use of the website (the "Website"), (ii) the personal data processing carried out by the Administrator during communication by e-mail or telephone, (iii) during the course of the business relationship with customers, suppliers and prospective customers of the Administrator's goods or services, (iv) in the performance of the Administrator's legal obligations, and (v) the personal data processing that is necessary for the purposes of protecting the legitimate interests of the Administrator.


Personal data may be processed by the Administrator for the following purposes:

  • performance of a contract, including its negotiation (purchase contract, work contract);
  • performance of legal obligations (obligations arising from generally binding regulations governing accounting, tax administration, employment law, social security administration, etc.);
  • sending commercial announcements, offering services and products and targeting advertisements;
  • protection of the legitimate interests of the Administrator (protection of property, protection of personal health);


The Administrator is entitled to process the following personal data according to the purpose of processing: name and surname, contact address, e-mail address, telephone number, account number and other transaction data, ID number, VAT number, birth number, other information concerning customers, business partners, those interested in the Administrator's goods or services, information about education, experience, or other relevant professional information to the extent appropriate.

Personal data is processed by the Administrator both manually and automatically. Automated personal data processing occurs mainly for the purposes of fulfilling the contractual relationship and offering services.


The Administrator collects, stores and uses certain information using automated tools when visiting the Administrator's website. When you visit and use the (the "Website"), cookies - files that are used to store and receive information about the computers, phones and other devices from which the Website is accessed - are activated on the Website visitor's device. Cookies allow information about a visit to the Website to be recorded. Cookies are text files containing small amounts of information that are downloaded to a visitor's device when they visit the Website. Cookies are then sent back to the Website or another website that recognizes them on each subsequent visit.  Cookies perform a variety of tasks, such as enabling efficient navigation between websites, remembering visitor preferences. They can also ensure that advertisements displayed online are better tailored to the visitor's personality and interests.

The Administrator uses basic, analytical and marketing cookies on the Website.


Basic cookies are essential to the operation of the Website, and enable the basic functionality of the Website. This category of cookies cannot be disabled.


Analytical/statistical cookies allow, for example, to recognize and determine the number of visitors and to track how my visitors use the Website. They help me to improve the way the site works, for example by enabling users to easily find what they are looking for. I only run these files with your prior consent.


Advertising cookies are used to track your preferences and allow you to see advertising and other content that best matches your interests and online behaviour. We only run these cookies with your prior consent.

The following marketing tools are used on the Website:

  • Google Analytics advertising features;
  • Google ads - a tool that uses cookies to serve relevant advertising;
  • Sklik - marketing tool of, a.s.

Further information about cookies and the current list of cookies can be found via the individual web browsers, most often under Developer Tools.

Consent can be expressed via a checkbox in the cookie bar. You can subsequently refuse cookies in your browser settings or set your browser to use only some of them. You can also change the cookie settings on this website by calling up the cookie bar here.

For more information on the management of cookies in individual browsers, please visit the following links:


In the case of consent to the personal data processing for the purpose of sending quotations or for the purpose of contacting you with offers of services and goods, usually by e-mail or telephone contact, this is personal data processing on the basis of consent, which is voluntary and can be withdrawn at any time. Consent is granted until it is withdrawn. Failure to provide consent does not affect the performance of the contract.


The administrator is entitled to disclose the personal data processed:  

  • to authorised employees,
  • to processors of personal data on the basis of a personal data processing contract, to the extent necessary for the fulfilment of the individual purposes of processing and on the basis of the corresponding legal title for the personal data processing
  • in cases provided for by law, to public authorities, e.g. law enforcement authorities, tax authorities or other public authorities.


The Administrator processes personal data for the period of time necessary to ensure all rights and obligations arising from the relevant contractual relationship and for the period of time for which the Administrator is obliged to retain personal data under generally binding legal regulations or for which the data subject has given his/her consent to the processing. In other cases, the processing period is based on the purpose of the processing, for which it must be proportionate, or is determined by data protection legislation.

The Administrator processes personal data according to the purpose of their processing for the period of time as specified herein:

  • Performance of the contract - for the duration of the contractual relationship and for 10 years after the termination of the contractual relationship
  • Performance of legal obligations - for the period specified by the relevant legal regulation
  • Sending commercial communications, offering services and products - for the duration of the consent to the personal data processing, or until the consent to the processing is withdrawn, or in accordance with specific legislation
  • Protection of the legitimate interest of controllers or third parties - for a maximum period of 3 years from the start of the processing, unless otherwise provided for by specific legislation, unless it is necessary to keep the data for a longer period in relation to a specific case
  • Processing of requests sent via electronic forms - for as long as necessary to process the relevant request


The data subject has the right to:  

  • access to personal data,
  • to correct inaccurate and complete incomplete personal data,
  • to erasure of personal data if the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, or if it is established that they have been unlawfully processed,
  • to restrict the personal data processing,
  • the transferability of the data,
  • the right to object, after which the personal data processing shall be terminated, unless it is established that there are substantial legitimate grounds for the processing which override the interests or rights and freedoms of the data subject, in particular where the ground is the possible exercise of legal claims; and
  • the right to have recourse to the Data Protection Authority. Privacy and personal data protection is supervised by the Office for Personal Data Protection, located at Pplk. Sochora 27 170 00 Prague 7, tel.: 234 665 111, web:

This personal data processing guidelines are effective from 1 November 2022